Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/896349CE24BC11F0A9BCD3C3DAE4EC9C.roa
File: 896349CE24BC11F0A9BCD3C3DAE4EC9C.roa (raw, json)
Hash identifier: gzZAuMe05/PUPW2X4OT4Fw2djS3Sm9wDgX9L8//qZ40=
Subject key identifier: C7:92:BD:2B:A5:E9:8F:50:F4:EE:86:8B:31:B6:D3:E3:CE:7A:DC:59
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0977
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/896349CE24BC11F0A9BCD3C3DAE4EC9C.roa
Signing time: Tue 29 Apr 2025 05:41:03 +0000
ROA not before: Tue 29 Apr 2025 05:40:58 +0000
ROA not after: Thu 01 Jan 2026 05:40:58 +0000
asID: 55154
IP address blocks: 102.135.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Apr 2025 05:57:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2423 (0x977)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Apr 29 05:40:58 2025 GMT
Not After : Jan 1 05:40:58 2026 GMT
Subject: CN=6810666f-d7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:75:b3:2c:40:40:96:2b:c2:d7:56:67:3d:5e:
0d:64:9a:ee:09:12:f0:ce:ab:9a:89:17:69:b4:ef:
30:d7:b8:bd:52:46:ac:8d:12:7b:76:99:88:80:28:
28:c7:a0:94:92:ea:b6:5e:63:a4:b6:79:7d:0f:8d:
4f:48:6c:4a:c2:49:d5:18:13:75:06:87:9a:6d:59:
19:ba:9c:88:e4:d6:bc:eb:06:72:ed:94:59:ed:b5:
cf:ea:92:b0:fb:c2:76:9d:3a:f2:a4:15:0d:87:85:
27:ac:70:f8:67:fd:8f:2c:52:22:11:35:7d:f3:e8:
ee:ee:dd:22:ce:25:30:23:da:28:c3:c0:c6:2b:c4:
71:b8:06:94:58:02:d1:0f:f1:70:1b:82:ca:29:05:
f7:fd:0d:4a:77:e5:59:ae:4e:54:07:8b:9c:62:b0:
7a:57:1e:ce:01:1f:40:2c:b1:71:32:c4:af:8d:ea:
ff:21:a0:61:a1:c9:45:ac:77:23:7d:14:25:df:b4:
6f:8a:c8:11:07:a1:bd:19:ed:33:c7:2d:5c:52:0d:
c4:f0:1a:8b:ae:f6:5b:f9:ad:6d:34:22:8c:5d:a9:
e1:29:11:75:17:6a:da:ef:4b:52:af:37:b3:c4:fe:
04:49:09:79:53:2b:72:8c:83:d9:92:bb:ee:ba:30:
eb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:92:BD:2B:A5:E9:8F:50:F4:EE:86:8B:31:B6:D3:E3:CE:7A:DC:59
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/896349CE24BC11F0A9BCD3C3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.0.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:7b:31:4b:28:ed:5f:d8:42:ac:0f:5c:90:fe:a0:05:8a:2d:
52:bd:3e:78:0a:84:7e:6f:eb:0f:80:78:2d:b0:98:95:d7:d2:
05:15:52:2c:eb:75:df:d6:1e:20:7a:5b:95:0c:c5:57:a2:84:
eb:fc:e7:e8:74:79:5b:7b:26:a0:47:66:f0:3a:97:0c:f0:4a:
2b:81:0e:20:34:db:6d:59:85:40:83:ac:3f:1a:da:8f:29:c5:
97:fd:d9:ba:d5:bc:57:b2:2f:78:ae:e2:34:a7:cf:f2:99:33:
82:3a:0c:4e:9c:ec:1f:84:c9:cd:ad:58:d1:03:42:19:89:06:
d2:0c:55:ae:13:35:51:c1:5c:0d:b1:63:99:fe:af:48:ee:eb:
c4:0b:f2:8f:99:56:39:77:0a:8f:34:24:79:84:4c:00:ea:43:
95:a0:b2:ac:f4:51:39:58:f7:51:a5:d2:4f:7e:ba:6e:33:03:
1d:c5:5f:50:58:57:9d:e0:5f:4e:dc:4d:fe:63:2f:41:70:92:
55:8a:aa:c8:d4:3f:a5:94:83:ae:2b:7f:48:d1:e3:20:64:fc:
c4:99:eb:9a:3f:bb:d7:b9:3d:84:da:26:8f:9e:e9:0b:36:4d:
69:d9:44:b6:d6:b5:fd:7e:4a:41:06:9a:f3:ac:21:fb:f3:2e:
29:65:46:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 21:00:52 2025 by rpki-client